Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
File:                     e5b29350-97e8-3c9d-8af3-e08fba14e907.roa (raw, json)
Hash identifier:          FYjd1BZSWEiYYScrLXFZ4eakB0GzLlC5cO8EJFEv6Wg=
Subject key identifier:   F1:E8:C1:55:2D:B3:07:95:E8:DF:B2:F0:DC:87:69:FE:16:A9:7B:50
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F43285849D594E14E86631D8060A83600
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     397131
IP address blocks:        23.170.32.0/24 maxlen: 24
                          2602:fe6a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e1:4e:86:63:1d:80:60:a8:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=932b5e1f-e123-4f76-8f48-fc3749f593d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e8:bd:11:a0:63:ad:01:81:23:4e:35:00:c2:
                    3a:cc:b2:b8:69:00:43:f7:35:f3:0b:cb:ad:39:a0:
                    11:cc:32:3b:2d:95:bd:ac:91:bf:18:89:4a:d3:01:
                    10:00:3e:6e:a5:2e:24:93:9c:36:fb:1a:a6:dc:66:
                    ca:3f:9e:96:cc:5a:73:15:da:1f:45:6b:18:c4:48:
                    36:c0:18:b6:e1:1b:ec:96:ad:ef:8c:ae:bc:53:ef:
                    07:9a:d3:67:5d:1c:4c:cd:cb:10:69:53:f1:ab:86:
                    8a:4d:d0:62:f5:ca:77:9c:94:82:9b:d3:d9:5f:06:
                    c0:53:ee:22:c8:27:bd:c3:b7:44:a4:f7:7e:ab:96:
                    c6:26:b7:97:f1:8e:b6:c0:1f:93:5a:bd:52:1b:7d:
                    38:d6:9c:cf:8a:fe:fe:ae:a4:df:c4:fc:f6:f0:f1:
                    44:ad:73:37:22:58:9e:7a:5c:0a:b1:bd:c3:90:34:
                    40:74:17:35:89:5c:b5:74:9e:2d:74:33:6a:8a:a9:
                    a5:a4:46:d8:7d:ee:59:23:ca:d6:81:59:f5:a1:a2:
                    47:19:3e:aa:ed:23:cc:f3:80:24:c8:d7:06:d5:89:
                    45:44:23:0d:bb:e4:79:12:b1:08:46:a7:53:b4:05:
                    bb:ad:5f:d5:00:c9:ce:82:50:79:37:4d:3d:34:8d:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:C1:55:2D:B3:07:95:E8:DF:B2:F0:DC:87:69:FE:16:A9:7B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.32.0/24
                IPv6:
                  2602:fe6a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9d:03:08:b3:72:f4:d2:13:91:43:6d:97:54:aa:c3:64:ea:
         af:13:a9:28:96:d0:10:2e:cd:0b:ff:c5:55:49:b8:01:b1:5d:
         e7:cd:2c:e1:04:6d:d5:07:bc:ab:16:40:f9:4d:7f:b8:59:d7:
         0d:69:5a:12:9a:c9:02:db:56:93:a9:b3:b8:7c:16:4a:8e:ad:
         2d:e3:df:d2:b4:b8:31:1f:79:9c:a7:4b:63:17:8d:ac:ce:48:
         e2:9f:45:78:9f:93:34:5d:2c:a2:6c:31:a3:51:ae:4e:28:fd:
         eb:11:26:83:dc:25:43:c4:a6:80:0f:e6:f4:d6:da:ef:f1:c9:
         40:6b:b8:7e:6f:23:f7:d2:4a:84:fc:be:c9:18:e3:7b:4e:b8:
         f4:eb:cb:14:80:3f:db:08:bb:fc:cf:c0:2b:fb:b3:d3:60:37:
         e8:6e:ba:a1:b2:a6:c4:0b:be:4c:55:a0:1a:9c:1a:e3:9f:9b:
         25:d0:e3:2b:de:05:f8:43:18:96:3c:99:2a:87:a1:b0:d9:3e:
         22:e6:17:c5:b2:a4:f2:7c:ba:7f:81:3a:3d:d7:f3:43:cd:5b:
         17:69:da:62:aa:9f:ba:5f:c7:61:9f:b0:ed:9e:85:13:ff:da:
         c7:9a:53:72:17:ca:76:a6:77:39:e0:20:0b:ff:42:87:3f:b6:
         9e:21:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:12:33 2025 by rpki-client